Double SP-Functions: Enhanced Generalized Feistel Networks: Extended Abstract

Andrey Bogdanov; Kyoji Shibutani

Double SP-Functions: Enhanced Generalized Feistel Networks: Extended Abstract

Andrey Bogdanov
, Kyoji Shibutani

Université catholique de Louvain
Sony Group Corporation

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

This work deals with the security and efficiency of type-I and type-II generalized Feistel networks (GFNs) with 4 lines. We propose to instantiate the GFNs with double SP-functions (substitutionpermutation layer followed by another substitution-permutation layer) instead of single SP-functions (one substitution-permutation layer). We provide tight lower bounds on the number of differentially and linearly active functions and S-boxes in such ciphers. Based on these bounds, we show that the instantiation with double SP-functions using MDS diffusion has a proportion of differentially and linearly active S-boxes by up to 33% and 50% higher than that with single SP-functions for type-I and type-11 GENs, respectively. This opens up the possibility of designing more efficient block ciphers based on GFN structure. Note that type-1 and type-II GFNs are the only non-contracting OFNs with 4 lines under a reasonable definition of a GFN.

Original language	English
Title of host publication	Information Security and Privacy. Proceedings
Publisher	Springer
Publication date	2011
Pages	106-119
ISBN (Print)	978-3-642-22496-6
ISBN (Electronic)	978-3-642-22497-3
Publication status	Published - 2011
Externally published	Yes
Event	16th Australasian Conference on Information Security and Privacy - Melbourne, Australia Duration: 11 Jul 2011 → 13 Jul 2011 Conference number: 16

Conference

Conference	16th Australasian Conference on Information Security and Privacy
Number	16
Country/Territory	Australia
City	Melbourne
Period	11/07/2011 → 13/07/2011

Series	Lecture Notes in Computer Science
Volume	6812
ISSN	0302-9743

OpenUrl availability

Check availability in DTU Findit

Cite this

@inproceedings{179ca2e0b06c4144bbd1e53c578bf098,

title = "Double SP-Functions: Enhanced Generalized Feistel Networks: Extended Abstract",

abstract = "This work deals with the security and efficiency of type-I and type-II generalized Feistel networks (GFNs) with 4 lines. We propose to instantiate the GFNs with double SP-functions (substitutionpermutation layer followed by another substitution-permutation layer) instead of single SP-functions (one substitution-permutation layer). We provide tight lower bounds on the number of differentially and linearly active functions and S-boxes in such ciphers. Based on these bounds, we show that the instantiation with double SP-functions using MDS diffusion has a proportion of differentially and linearly active S-boxes by up to 33\% and 50\% higher than that with single SP-functions for type-I and type-11 GENs, respectively. This opens up the possibility of designing more efficient block ciphers based on GFN structure. Note that type-1 and type-II GFNs are the only non-contracting OFNs with 4 lines under a reasonable definition of a GFN.",

author = "Andrey Bogdanov and Kyoji Shibutani",

year = "2011",

language = "English",

isbn = "978-3-642-22496-6",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "106--119",

booktitle = "Information Security and Privacy. Proceedings",

note = "16th Australasian Conference on Information Security and Privacy, ACISP 2011 ; Conference date: 11-07-2011 Through 13-07-2011",

}

TY - GEN

T1 - Double SP-Functions: Enhanced Generalized Feistel Networks

T2 - 16th Australasian Conference on Information Security and Privacy

AU - Bogdanov, Andrey

AU - Shibutani, Kyoji

N1 - Conference code: 16

PY - 2011

Y1 - 2011

N2 - This work deals with the security and efficiency of type-I and type-II generalized Feistel networks (GFNs) with 4 lines. We propose to instantiate the GFNs with double SP-functions (substitutionpermutation layer followed by another substitution-permutation layer) instead of single SP-functions (one substitution-permutation layer). We provide tight lower bounds on the number of differentially and linearly active functions and S-boxes in such ciphers. Based on these bounds, we show that the instantiation with double SP-functions using MDS diffusion has a proportion of differentially and linearly active S-boxes by up to 33% and 50% higher than that with single SP-functions for type-I and type-11 GENs, respectively. This opens up the possibility of designing more efficient block ciphers based on GFN structure. Note that type-1 and type-II GFNs are the only non-contracting OFNs with 4 lines under a reasonable definition of a GFN.

AB - This work deals with the security and efficiency of type-I and type-II generalized Feistel networks (GFNs) with 4 lines. We propose to instantiate the GFNs with double SP-functions (substitutionpermutation layer followed by another substitution-permutation layer) instead of single SP-functions (one substitution-permutation layer). We provide tight lower bounds on the number of differentially and linearly active functions and S-boxes in such ciphers. Based on these bounds, we show that the instantiation with double SP-functions using MDS diffusion has a proportion of differentially and linearly active S-boxes by up to 33% and 50% higher than that with single SP-functions for type-I and type-11 GENs, respectively. This opens up the possibility of designing more efficient block ciphers based on GFN structure. Note that type-1 and type-II GFNs are the only non-contracting OFNs with 4 lines under a reasonable definition of a GFN.

M3 - Article in proceedings

SN - 978-3-642-22496-6

T3 - Lecture Notes in Computer Science

SP - 106

EP - 119

BT - Information Security and Privacy. Proceedings

PB - Springer

Y2 - 11 July 2011 through 13 July 2011

ER -

Double SP-Functions: Enhanced Generalized Feistel Networks: Extended Abstract

Abstract

Conference

OpenUrl availability

Fingerprint

Cite this